Known Vulnerabilities for Thinkpad P1 Firmware by Lenovo
Listed below are 9 of the newest known vulnerabilities associated with "Thinkpad P1 Firmware" by "Lenovo".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-3786 json | A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad system... | 5.5 - MEDIUM | 2021-11-12 | 2021-11-26 |
| CVE-2021-3599 json | A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attac... | 6.7 - MEDIUM | 2021-11-12 | 2021-11-24 |
| CVE-2020-8323 json | A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, an... | 6.7 - MEDIUM | 2020-06-09 | 2020-06-22 |
| CVE-2020-8320 json | An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege. | 6.8 - MEDIUM | 2020-06-09 | 2020-06-17 |
| CVE-2019-18619 json | Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to ... | 7.8 - HIGH | 2020-07-22 | 2020-07-30 |
| CVE-2019-18618 json | Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all ver... | 6 - MEDIUM | 2020-07-22 | 2020-07-30 |
| CVE-2019-6188 json | The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS... | 9.8 - CRITICAL | 2019-11-12 | 2020-08-24 |
| CVE-2019-6172 json | A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient ch... | 6.4 - MEDIUM | 2019-11-12 | 2020-12-08 |
| CVE-2019-6170 json | A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime... | 6.4 - MEDIUM | 2019-11-12 | 2020-12-08 |